Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: 0dukyD8ku1bk2MHCCtfssGtfGkmoOHNEdhLyPJRGqJY=
Subject key identifier: 34:2E:9D:0F:AB:63:98:5F:7E:B9:1F:02:D2:61:7A:10:81:74:66:BB
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019A51874D52BCB9130CA4BA1C94E0E912B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0DC8
Signing time: Wed 05 Nov 2025 01:00:12 +0000
Manifest this update: Wed 05 Nov 2025 01:00:12 +0000
Manifest next update: Thu 06 Nov 2025 01:00:12 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: I1A9S8uGBXkFrkwJ05IOaOa9T9jRKrqA2GOeodETmbw=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4d:52:bc:b9:13:0c:a4:ba:1c:94:e0:e9:12:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Nov 5 01:00:12 2025 GMT
Not After : Nov 6 01:00:12 2025 GMT
Subject: CN=342e9d0fab63985f7eb91f02d2617a10817466bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:a1:20:ca:24:53:f1:8d:36:ee:4a:25:4c:
cb:ea:d9:a5:05:65:fd:ff:cf:ac:95:73:00:03:a5:
c2:37:8d:3b:7d:39:5e:b3:f7:f1:c6:07:d6:73:49:
ba:73:5e:74:11:5f:a8:02:c0:ef:34:7d:ed:4c:21:
65:1f:16:a3:0a:f4:ff:cc:2d:73:6c:61:5c:22:39:
c4:70:fa:57:71:df:3a:e1:05:81:5a:e2:15:c5:5a:
0a:24:09:e1:5e:20:bf:cf:71:0b:f3:d1:fc:8c:b9:
f4:92:8d:3e:dd:f7:ad:96:8c:1b:24:85:6c:c5:d4:
82:83:6a:02:5d:40:3a:dd:bb:5f:eb:97:a3:2f:62:
38:ba:af:26:94:5d:42:8e:74:6a:ca:5f:bb:a1:63:
22:68:36:78:92:94:30:f3:e5:07:a5:bc:d0:44:65:
cb:92:b5:8d:9b:19:87:f4:a4:8e:de:5e:6e:4c:bb:
31:37:a3:11:73:a5:95:0c:a2:12:de:22:1b:95:93:
b6:af:3b:3c:7b:74:50:18:9f:c0:c0:07:cc:90:d3:
97:58:a8:76:1f:89:1e:74:a5:c4:f8:7d:c8:e3:60:
29:f1:77:47:0f:23:a5:3a:bb:64:f8:d8:2f:6f:1d:
d9:54:2f:f1:ca:2e:40:b1:a9:67:a1:c9:4a:58:2a:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:9D:0F:AB:63:98:5F:7E:B9:1F:02:D2:61:7A:10:81:74:66:BB
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:c3:ae:d4:83:3b:98:4b:e9:94:9b:a1:02:cb:80:7d:b1:
0a:96:88:31:7b:99:8a:f8:e6:f1:8e:f9:e6:08:57:43:a6:21:
06:8e:4b:5f:e8:32:6b:fa:b3:22:72:fe:6e:44:fd:36:a6:f0:
35:81:29:5b:11:50:e5:29:0e:39:0e:d5:9f:d7:bd:39:0e:45:
87:76:43:4f:ce:5f:87:7b:3c:e0:1f:86:4f:e0:4a:91:1a:35:
01:14:13:3e:1d:3f:e0:14:e1:4f:ed:15:49:8c:56:6f:e3:c5:
8a:90:ce:8b:97:ff:eb:0b:1d:10:56:e0:f3:b1:b0:cd:e5:91:
ca:33:b0:a0:c4:a0:be:ee:7a:a5:83:df:5d:81:d0:a3:9f:bf:
68:97:4d:65:17:04:4e:82:ad:98:7d:37:91:11:70:3d:72:7c:
03:e8:42:d1:69:e4:c8:bb:df:7c:4d:32:c5:e9:ad:a0:33:23:
33:db:76:4b:d4:84:21:ca:3d:1f:70:02:30:f7:7d:1b:1c:ec:
66:40:95:49:fc:e1:a4:12:61:31:38:80:fc:70:5c:65:67:92:
5f:05:94:7b:b2:1e:c4:7b:ca:a2:01:82:5a:39:67:d7:34:64:
60:5c:8b:65:54:28:a6:94:ba:c6:36:09:34:45:cf:e5:ba:13:
a5:d5:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:34 2025 by rpki-client